Logfile of HijackThis v1.99.1
Scan saved at 15:11:04, on 09/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
I do not see a firewall application installed. Please do not rely solely on the Windows XP firewall. For a tutorial on Firewalls and a listing of some available ones see the link below: Understanding and Using Firewalls
Please test your firewall and make sure it is working properly. Test Firewall
STEP 1.
====== SpySweeper
Download the trial version of Spy Sweeper from Here
Install it using the Standard Install option. (You will be asked for your e-mail address, it is safe to give it. If you receive alerts from your firewall, allow all activities for Spy Sweeper)
If you are taken to the internet page, just close the page.
You will be prompted to check for updated definitions, please do so.
(This may take several minutes)
Click on Options > Sweep Options and check Sweep all Folders on Selected drives. Check Local Disc C. Under What to Sweep, check every box.
Click on Sweep and allow it to fully scan your system.If you are prompted to restart the computer, do so immediately. This is a necessary step to kill the infection!
When the sweep has finished, click Remove. Click Select All and then Next
From 'Results', select the Session Log tab. Click Save to File and save the log somewhere convenient.
STEP 2.
======
The AVG anti-spyware program’s detection rate is excellent. After the Trial has expired, the auto updates and real time protection stop but you can still update it manually and run scans anytime you want.
First download AVG anti-spyware 7.5 from HERE and save that file to your
desktop. This is a 30 day trial of the program
Once you have downloaded AVG anti-spyware , locate the icon on the desktop
and double-click it to launch the set up program.
Once the setup is complete you will need run AVG anti-spyware and update the definition
files.
On the main screen select the icon "Update" then select the "
Update now" link.
Next select the "Start Update" button, the update will start and a
progress bar will show the updates being installed.
Once the update has completed select the "Scanner" icon at the top of
the screen, then select the "Settings" tab.
Once in the Settings screen click on "Recommended actions" and then
select "Quarantine".
Under "Reports"
Select "Automatically generate report after every scan"
Un-Select "Only if threats were found"
Close AVG anti-spyware , Do Not run a scan just yet, we will shortly.
Reboot your computer into SafeMode. You can do this by restarting
your computer and continually tapping the F8 key until a menu appears.
Use your up arrow key to highlight SafeMode then hit enter. IMPORTANT: Do not open any other windows or
programs while AVG anti-spyware is scanning, it may interfere with the scanning proccess:
Lauch ewido-anti-spyware by double-clicking the icon on your desktop.
Select the "Scanner" icon at the top and then the "Scan" tab
then click on "Complete System Scan".
AVG anti-spyware will now begin the scanning process, be patient this may take a little
time. Once the scan is complete do the following:
If you have any infections you will prompted, then select "Apply all
actions"
Next select the "Reports" icon at the top.
Select the "Save report as" button in the lower left hand of the
screen and save it to a text file on your system (make sure to remember where
you saved that file, this is important).
Close AVG anti-spyware and reboot your system back into Normal Mode and post the
results of the AVG anti-spyware report scan.
Please post the results from SpySweeper, AVG anti-spyware and a new hijackthis log.
hey thanks i got zone alarm, did spysweep but forgot to save the log file. i will do another scan. i did the scan with avg in safe mode. here is the log file
i will post the hijack this and spysweep logfile asap.
cheers!
AVG Anti-Spyware - Scan Report
———————————————————
+ Created at: 16:38:00 11/11/2006
+ Scan result:
C:\Program Files\Common Files\Real\WeatherBug\MiniBugTransporter.dll -> Adware.Minibug : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\ins -> Adware.WebRebates : Cleaned with backup (quarantined).
C:\Documents and Settings\Geoff\Cookies\geoff@adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned.
C:\Documents and Settings\Geoff\Cookies\geoff@adtech[2].txt -> TrackingCookie.Adtech : Cleaned.
C:\Documents and Settings\Geoff\Cookies\geoff@com[1].txt -> TrackingCookie.Com : Cleaned.
C:\Documents and Settings\Geoff\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.13:C:\Documents and Settings\Geoff\Application Data\Mozilla\Firefox\Profiles\dvbfno4r.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Documents and Settings\Geoff\Cookies\geoff@questionmarket[2].txt -> TrackingCookie.Questionmarket : Cleaned.
C:\Documents and Settings\Geoff\Cookies\geoff@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\Geoff\Cookies\[removed][2].txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.11:C:\Documents and Settings\Geoff\Application Data\Mozilla\Firefox\Profiles\dvbfno4r.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.18:C:\Documents and Settings\Geoff\Application Data\Mozilla\Firefox\Profiles\dvbfno4r.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
C:\Documents and Settings\Geoff\Cookies\[removed][2].txt -> TrackingCookie.Yieldmanager : Cleaned.
::Report end
18:19: Removal process completed. Elapsed time 00:00:07
18:19: Quarantining All Traces: realmedia cookie
18:19: Removal process initiated
17:45: Access to Hosts file allowed for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
17:45: Access to Hosts file allowed for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
17:21: Traces Found: 2
17:21: Full Sweep has completed. Elapsed time 00:22:04
17:21: File Sweep Complete, Elapsed Time: 00:18:10
17:19: Warning: Failed to access drive H:
17:19: Warning: Failed to access drive G:
17:19: Warning: Failed to access drive F:
17:19: Warning: Failed to access drive E:
17:19: Warning: Failed to access drive D:
17:18: Warning: Failed to open file "c:\documents and settings\geoff\local settings\application data\microsoft\messenger\[removed]\sharingmetadata\pending.dat". The operation completed successfully
17:17: Warning: Failed to open file "c:\documents and settings\geoff\local settings\temp\clclean.0001.dir.0017\~efe2.tmp". The operation completed successfully
17:03: Starting File Sweep
17:03: Cookie Sweep Complete, Elapsed Time: 00:00:01
17:03: c:\documents and settings\geoff\cookies\geoff@realmedia[1].txt (ID = 3235)
17:03: c:\documents and settings\geoff\cookies\[removed][1].txt (ID = 3236)
17:03: Found Spy Cookie: realmedia cookie
17:03: Starting Cookie Sweep
17:03: Registry Sweep Complete, Elapsed Time:00:00:32
17:02: Starting Registry Sweep
17:02: Memory Sweep Complete, Elapsed Time: 00:03:11
16:59: Starting Memory Sweep
16:59: Start Full Sweep
16:59: Sweep initiated using definitions version 800
16:59: Spy Sweeper 5.2.3.2125 started
16:59: | Start of Session, 11 November 2006 |
********
16:59: | End of Session, 11 November 2006 |
16:58: Your spyware definitions have been updated.
Keylogger: Off
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites: Off
Hosts File Shield: On
Internet Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
16:50: Shield States
16:50: Spyware Definitions: 799
16:50: Spy Sweeper 5.2.3.2125 started
16:45: Access to Hosts file allowed for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
16:45: Access to Hosts file allowed for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
Keylogger: Off
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites: Off
Hosts File Shield: On
Internet Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
16:41: Shield States
16:41: Spyware Definitions: 799
16:41: Warning: Virus definitions files are invalid, please update your virus definitions. 220
16:40: Spy Sweeper 5.2.3.2125 started
15:23: Access to Hosts file allowed for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
15:23: Access to Hosts file allowed for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
15:23: Access to Hosts file allowed for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
15:23: Access to Hosts file allowed for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
15:22: None
15:22: Traces Found: 0
15:22: Memory Sweep Complete, Elapsed Time: 00:00:02
15:22: Sweep Canceled
15:22: Starting Memory Sweep
15:21: Start Full Sweep
15:21: Sweep initiated using definitions version 799
15:21: Spy Sweeper 5.2.3.2125 started
15:21: | Start of Session, 11 November 2006 |
********
15:21: | End of Session, 11 November 2006 |
15:18: Access to Hosts file allowed for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
15:18: Access to Hosts file allowed for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
Keylogger: Off
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites: Off
Hosts File Shield: On
Internet Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
15:13: Shield States
15:13: Warning: Virus definitions files are invalid, please update your virus definitions. 220
15:13: Spyware Definitions: 799
15:12: Spy Sweeper 5.2.3.2125 started
Operation: Terminate
Target: C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
Source: C:\WINDOWS\system32\csrss.exe
23:04: Tamper Detection
Operation: Terminate
Target: C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
Source: C:\WINDOWS\system32\csrss.exe
23:03: Tamper Detection
Keylogger: Off
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites: Off
Hosts File Shield: On
Internet Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
22:44: Shield States
22:44: Spyware Definitions: 799
22:44: Warning: Virus definitions files are invalid, please update your virus definitions. 220
22:43: Spy Sweeper 5.2.3.2125 started
22:06: Access to Hosts file allowed for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
22:06: Access to Hosts file allowed for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
Keylogger: Off
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites: Off
Hosts File Shield: On
Internet Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
22:01: Shield States
22:01: Spyware Definitions: 799
22:01: Warning: Virus definitions files are invalid, please update your virus definitions. 220
22:00: Spy Sweeper 5.2.3.2125 started
15:57: | End of Session, 10 November 2006 |
15:56: Download has been canceled at your request.
15:56: Download has been canceled at your request.
15:56: Your definitions are up to date.
15:54: Access to Hosts file blocked for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
15:54: Access to Hosts file blocked for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
Keylogger: Off
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites: Off
Hosts File Shield: On
Internet Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
15:50: Shield States
15:50: Spyware Definitions: 790
15:50: Warning: Virus definitions files are invalid, please update your virus definitions. 220
15:49: Spy Sweeper 5.2.3.2125 started
15:49: Spy Sweeper 5.2.3.2125 started
15:49: | Start of Session, 10 November 2006 |
********
21:56: Deletion from quarantine completed. Elapsed time 00:00:00
21:56: Processing: zedo cookie
21:56: Processing: zedo cookie
21:56: Processing: tribalfusion cookie
21:56: Processing: yieldmanager cookie
21:56: Processing: tradedoubler cookie
21:56: Processing: tickle cookie
21:56: Processing: serving-sys cookie
21:56: Processing: webhancer
21:56: Processing: webrebates
21:56: Processing: webrebates
21:56: Processing: drivecleaner
21:56: Processing: trojan-downloader-zlob
21:56: Deletion from quarantine initiated
21:55: Removal process completed. Elapsed time 00:01:02
21:55: Quarantining All Traces: tickle cookie
21:55: Quarantining All Traces: tribalfusion cookie
21:55: Quarantining All Traces: tradedoubler cookie
21:55: Quarantining All Traces: serving-sys cookie
21:55: Quarantining All Traces: zedo cookie
21:55: Quarantining All Traces: yieldmanager cookie
21:55: Quarantining All Traces: drivecleaner
21:55: Quarantining All Traces: webrebates
21:54: Quarantining All Traces: webhancer
21:54: Quarantining All Traces: trojan-downloader-zlob
21:54: Removal process initiated
20:59: Access to Hosts file allowed for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
20:58: Access to Hosts file allowed for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
19:58: Access to Hosts file allowed for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
19:57: Access to Hosts file allowed for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
18:57: Access to Hosts file allowed for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
18:56: Access to Hosts file allowed for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
17:56: Access to Hosts file allowed for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
17:55: Access to Hosts file allowed for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
16:56: Access to Hosts file allowed for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
16:55: Access to Hosts file allowed for C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
16:21: Traces Found: 14
16:21: Full Sweep has completed. Elapsed time 00:23:51
16:21: File Sweep Complete, Elapsed Time: 00:19:53
16:18: C:\Documents and Settings\Geoff\Local Settings\Temporary Internet Files\Content.IE5\012JC1QJ\installdrivecleanerstart[1].cab (ID = 372396)
16:18: Found Adware: drivecleaner
16:17: Warning: Failed to access drive H:
16:17: Warning: Failed to access drive G:
16:17: Warning: Failed to access drive F:
16:17: Warning: Failed to access drive E:
16:17: Warning: Failed to access drive D:
16:16: Warning: Failed to open file "c:\documents and settings\geoff\local settings\temp\clclean.0001.dir.0013\~efe2.tmp". The operation completed successfully
16:02: C:\Program Files\WebRebates4\webrebates2.dll (ID = 271378)
16:01: C:\Program Files\WebRebates4 (1 subtraces) (ID = 2147497148)
16:01: Found Adware: webrebates
16:01: C:\Program Files\whInstall (ID = 2147487232)
16:01: Found Adware: webhancer
16:01: Starting File Sweep
16:01: Cookie Sweep Complete, Elapsed Time: 00:00:00
16:01: c:\documents and settings\geoff\cookies\geoff@zedo[2].txt (ID = 3762)
16:01: c:\documents and settings\geoff\cookies\[removed][2].txt (ID = 3530)
16:01: Found Spy Cookie: tickle cookie
16:01: c:\documents and settings\geoff\cookies\geoff@tribalfusion[1].txt (ID = 3589)
16:01: Found Spy Cookie: tribalfusion cookie
16:01: c:\documents and settings\geoff\cookies\geoff@tradedoubler[1].txt (ID = 3575)
16:01: Found Spy Cookie: tradedoubler cookie
16:01: c:\documents and settings\geoff\cookies\geoff@serving-sys[2].txt (ID = 3343)
16:01: Found Spy Cookie: serving-sys cookie
16:01: c:\documents and settings\geoff\cookies\[removed][1].txt (ID = 3763)
16:01: Found Spy Cookie: zedo cookie
16:01: c:\documents and settings\geoff\cookies\[removed][2].txt (ID = 3751)
16:01: Found Spy Cookie: yieldmanager cookie
16:01: Starting Cookie Sweep
16:01: Registry Sweep Complete, Elapsed Time:00:00:30
16:01: HKLM\software\classes\media-codec.chl\ (ID = 1247793)
16:01: HKCR\media-codec.chl\ (ID = 1247790)
16:01: Found Trojan Horse: trojan-downloader-zlob
16:00: Starting Registry Sweep
16:00: Memory Sweep Complete, Elapsed Time: 00:03:17
15:57: Starting Memory Sweep
15:57: Start Full Sweep
15:57: Sweep initiated using definitions version 799
15:57: Spy Sweeper 5.2.3.2125 started
15:57: | Start of Session, 10 November 2006 |
********
And the results for hijack this:
Logfile of HijackThis v1.99.1
Scan saved at 18:42:55, on 11/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Glad the computer seems happier, it will make you happier! Unless you have any other problems, these are the last instructions that will help prevent future infections. Do not hesistant to reply if you have any other questions.
SpySweeper and Ewido AntiSpyware are trial. You may want to keep them until the trial runs out.
STEP 1.
====== Cleanmgr
To clean temporary files:
Go > start > run and type cleanmgr and click OK
Scan your system for files to remove.
Make sure Temporary Files, Temporary Internet Files and Recycle Bin are the only things checked.
Click OK to remove those files.
Click Yes to confirm deletion.
STEP 2.-
====== System Restore for Windows XP Reset and Re-enable your System Restore to remove infected files that have been backed up by Windows. The files in System Restore are protected to prevent any programs changing those files. This is the only way to clean these files: (You will lose all previous restore points which are likely to be infected)
Turn off System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.
Reboot.
Turn ON System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
UN-Check *Turn off System Restore*.
Click Apply, and then click OK.
STEP 3.
====== DON’T BECOME OVERCONFIDENT WITH ANTIVIRUS APPLICATIONS INSTALLED!!!
Stay up to date on security patches and be extremely wary of clicking on links and attachments that arrive unbidden in instant messages and e-mail.
"The number one thing the majority of the malicious code we're seeing now does is disable or delete anti-virus and other security software," Dunham said. "In a lot of cases, once the user clicks on that attachment, it's already too late."
Now that you are clean, please follow these simple steps in order to keep your computer clean and secure:
Visit Microsoft's Update Site Frequently - It is important that you visit Windows Updates regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.
Install Spybot - Search and Destroy - Install and download Spybot - Search and Destroy with its TeaTimer option. This will provide realtime spyware & hijacker protection on your computer alongside your virus protection. You should also scan your computer with program on a regular basis just as you would an antivirus software.
A tutorial on installing & using this product can be found here: Using Spybot - Search & Destroy to remove Spyware , Malware, and Hijackers
Install Ad-Aware - Install and download Ad-Aware. ou should also scan your computer with program on a regular basis just as you would an antivirus software in conjunction with Spybot.
A tutorial on installing & using this product can be found here: Using Ad-aware to remove Spyware, Malware, & Hijackers from Your Computer
Updating Java
Download the latest version of Java Runtime Environment (JRE) 5.0 Update 9.
Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".
Click the "Download" button to the right.
Check the box that says: "Accept License Agreement".
The page will refresh.
Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
Close any programs you may have running - especially your web browser.
Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
Check any item with Java Runtime Environment (JRE or J2SE) in the name.
Click the Remove or Change/Remove button.
Repeat as many times as necessary to remove each Java versions.
Reboot your computer once all Java components are removed.
Then from your desktop double-click on jre-1_5_0_09-windowsi586-p.exe to install the newest version.
Install SpywareBlaster - SpywareBlaster will added a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.
A tutorial on installing & using this product can be found here: Using SpywareBlaster to protect your computer from Spyware and Malware
Update all these programs regularly - Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.
Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.
Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.
hey thanks i got zone alarm, did spysweep but forgot to save the log file. i will do another scan. i did the scan with avg in safe mode. here is the log file
i will post the hijack this and spysweep logfile asap.
cheers!
AVG Anti-Spyware - Scan Report
———————————————————
+ Created at: 16:38:00 11/11/2006
+ Scan result:
C:\Program Files\Common Files\Real\WeatherBug\MiniBugTransporter.dll -> Adware.Minibug : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\ins -> Adware.WebRebates : Cleaned with backup (quarantined).
C:\Documents and Settings\Geoff\Cookies\geoff@adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned.
C:\Documents and Settings\Geoff\Cookies\geoff@adtech[2].txt -> TrackingCookie.Adtech : Cleaned.
C:\Documents and Settings\Geoff\Cookies\geoff@com[1].txt -> TrackingCookie.Com : Cleaned.
C:\Documents and Settings\Geoff\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.13:C:\Documents and Settings\Geoff\Application Data\Mozilla\Firefox\Profiles\dvbfno4r.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Documents and Settings\Geoff\Cookies\geoff@questionmarket[2].txt -> TrackingCookie.Questionmarket : Cleaned.
C:\Documents and Settings\Geoff\Cookies\geoff@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\Geoff\Cookies\[removed][2].txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.11:C:\Documents and Settings\Geoff\Application Data\Mozilla\Firefox\Profiles\dvbfno4r.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.18:C:\Documents and Settings\Geoff\Application Data\Mozilla\Firefox\Profiles\dvbfno4r.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
C:\Documents and Settings\Geoff\Cookies\[removed][2].txt -> TrackingCookie.Yieldmanager : Cleaned.
::Report end